-
**Краткое описание:**
В снипет кода включается лишний текст из описания уязвимсоти.
`if (level === cadesplugin.LOG_LEVEL_DEBUG) **Rule name:** semgrep_public_rules.0xdea.generic.raptor-bad-words *…
-
**Description of the issue**
Whenever I execute code scanning and generate a SARIF file, I always read and parse it in standard JSON format, which makes it difficult to display. Are there any tools o…
-
## Description
The Static Analysis Results Interchange Format (SARIF) standard might be a more appropriate format for consideration instead of/as well as JUnit (https://github.com/Boeing/config-fil…
-
Lightgrep supports output to `stdout` or tab-delimited columnar data. Supporting [SARIF](https://docs.oasis-open.org/sarif/sarif/v2.1.0/csprd01/sarif-v2.1.0-csprd01.html) could allow for a richer repr…
-
Recently we have beeing seeing trivy action taking lot of time to Initialize the aqyasecurity trivy action(Build container for action use: '/home/runner/work/_actions/aquasecurity/trivy-action/0.20.0/…
-
I have this step in a workflow and it works:
```yaml
- name: "Upload Trivy scan results to GitHub Security tab"
uses: github/codeql-action/upload-sarif@v3
with:
…
-
Can you please clarify if there is specific query that is used for sarif file generation of this would be enough:
```bash
codeql database create java-db --language=java
codeql database analyze ja…
-
-
The Static Analysis Results Interchange Format ([SARIF](https://sarifweb.azurewebsites.net/)) is an industry standard format for the output of static analysis tools. Github supports SARIF format and a…
-
Please support the [SARIF standard](https://www.oasis-open.org/committees/tc_home.php?wg_abbrev=sarif) as an output format.
You may want to point to the requriements.txt file and the lines where the …